Changeset 26028 for trunk/include/functions_user.inc.php

Timestamp:

Dec 18, 2013, 8:59:30 PM (11 years ago)

Author:

mistic100

Message:

feature 1668: escape login and password in registration email

File:

• trunk/include/functions_user.inc.php (modified) (1 diff)

trunk/include/functions_user.inc.php

@@ -253 +253 @@
             
       $keyargs_content = array(
-        get_l10n_args('Hello %s,', $login),
+        get_l10n_args('Hello %s,', stripslashes($login)),
         get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']),
         get_l10n_args('', ''),
         get_l10n_args('Here are your connection settings', ''),
-        get_l10n_args('Username: %s', $login),
-        get_l10n_args('Password: %s', $password),
+        get_l10n_args('Username: %s', stripslashes($login)),
+        get_l10n_args('Password: %s', stripslashes($password)),
         get_l10n_args('Email: %s', $mail_address),
         get_l10n_args('', ''),